backend-test-creator

Pass

Audited by Gen Agent Trust Hub on Aug 20, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides structured guidance and reference material for creating and refactoring Mocha-based backend tests for Datex Studio. All operations are scoped to the intended platform functionality.
  • [COMMAND_EXECUTION]: The skill uses the official dxs CLI tool for configuration management (upsert, get, validate). These commands are standard for the platform and used appropriately within the described workflow.
  • [DYNAMIC_EXECUTION]: The skill involves authoring JSON files containing code strings for test cases and lifecycle hooks. These are executed by a platform-managed Mocha runner on a designated branch, representing standard behavior for a testing framework rather than an unsafe local execution vulnerability.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests configuration data via dxs configuration get and incorporates user requirements. While this creates a potential surface for injection, the skill includes human-in-the-loop steps (authoring/editing body.json) and recommends platform-side validation (dxs configuration validate) which mitigates the risk. The inherent risk is low and consistent with development tools.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 20, 2026, 01:10 PM
Security Audit — agent-trust-hub — backend-test-creator